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ABSTRACT 

Digital certification method in which a first 
digital signature dependent upon a first user identity 
and a. first user system in combination, is stored 
accessibly to a certification server. The first user 
identity can be distinguished by, for example, a PIN 
provided by the user. Subsequently, ^fe^a^o o cond t - imo * 
^ wfee*a~ s ?*lrfi^e^ — compare tre — ar» 

•tJ^ajosae^rTOTi^ the user system generates a second 
signature dependent upon both the current user identity 
and the current user system in combination. The 
certifying system then compares the second signature 
with the first, as stored, in - or der* — fco — defce-mi-ne 
wfe et - h e r to certify the transaction. The certification 



can accommodate normal computer system component drift. 
^)CZ » r " ifi — ^ — e m b od - Jrm eBrfev- -aaa- inquiring system ^ desiring to 
confirm the identity of a user, issues a challenge code 
to the user system. The user system then digests the 
user's PIN, individual component signatures as they 
currently exist on the user's system, together with the 
challenge code to generate the new signature. The new 
signature is transmitted back to the inquiring system, 
which transmits it on to the certification server 
together with the challenge code. The certification 
server then digests the challenge code with the 
original signature as previously stored, and compares 
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the result to the newly provided signature^- — If th e y 
C, — match - , - thon the user's identity ' *" " 

uthon drift criteria can be applied if desired. 
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